{"id":"https://openalex.org/W2146795968","doi":"https://doi.org/10.3233/jcs-2007-15201","title":"A policy-based methodology for security evaluation: A Security Metric for Public Key Infrastructures","display_name":"A policy-based methodology for security evaluation: A Security Metric for Public Key Infrastructures","publication_year":2007,"publication_date":"2007-02-05","ids":{"openalex":"https://openalex.org/W2146795968","doi":"https://doi.org/10.3233/jcs-2007-15201","mag":"2146795968"},"language":"en","primary_location":{"id":"doi:10.3233/jcs-2007-15201","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jcs-2007-15201","pdf_url":null,"source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012994834","display_name":"Valentina Casola","orcid":"https://orcid.org/0000-0003-0964-7014"},"institutions":[{"id":"https://openalex.org/I4210104655","display_name":"Ingegneria dei Trasporti (Italy)","ror":"https://ror.org/01fp7rv25","country_code":"IT","type":"company","lineage":["https://openalex.org/I4210104655"]},{"id":"https://openalex.org/I71267560","display_name":"University of Naples Federico II","ror":"https://ror.org/05290cv24","country_code":"IT","type":"education","lineage":["https://openalex.org/I71267560"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Valentina Casola","raw_affiliation_strings":["Dipartimento di Informatica e Sistemistica, Universit\u00e0 degli Studi di Napoli \u201cFederico II\u201d, Via Claudio 21, 80125 Napoli, Italy., , ,","Dipartimento di Informatica e Sistemistica, Universit\u00e0 degli Studi di Napoli \u201cFederico II\u201d, Via Claudio 21, 80125 Napoli, Italy. E-mail: casolav@unina.it, mazzeo@unina.it, n.mazzocca@unina.it, vittorin@unina.it"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dipartimento di Informatica e Sistemistica, Universit\u00e0 degli Studi di Napoli \u201cFederico II\u201d, Via Claudio 21, 80125 Napoli, Italy., , ,","institution_ids":["https://openalex.org/I4210104655","https://openalex.org/I71267560"]},{"raw_affiliation_string":"Dipartimento di Informatica e Sistemistica, Universit\u00e0 degli Studi di Napoli \u201cFederico II\u201d, Via Claudio 21, 80125 Napoli, Italy. E-mail: casolav@unina.it, mazzeo@unina.it, n.mazzocca@unina.it, vittorin@unina.it","institution_ids":["https://openalex.org/I71267560"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088599156","display_name":"Antonino Mazzeo","orcid":"https://orcid.org/0000-0002-4404-7738"},"institutions":[{"id":"https://openalex.org/I4210104655","display_name":"Ingegneria dei Trasporti (Italy)","ror":"https://ror.org/01fp7rv25","country_code":"IT","type":"company","lineage":["https://openalex.org/I4210104655"]},{"id":"https://openalex.org/I71267560","display_name":"University of Naples Federico II","ror":"https://ror.org/05290cv24","country_code":"IT","type":"education","lineage":["https://openalex.org/I71267560"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Antonino Mazzeo","raw_affiliation_strings":["Dipartimento di Informatica e Sistemistica, Universit\u00e0 degli Studi di Napoli \u201cFederico II\u201d, Via Claudio 21, 80125 Napoli, Italy., , ,","Dipartimento di Informatica e Sistemistica, Universit\u00e0 degli Studi di Napoli \u201cFederico II\u201d, Via Claudio 21, 80125 Napoli, Italy. E-mail: casolav@unina.it, mazzeo@unina.it, n.mazzocca@unina.it, vittorin@unina.it"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dipartimento di Informatica e Sistemistica, Universit\u00e0 degli Studi di Napoli \u201cFederico II\u201d, Via Claudio 21, 80125 Napoli, Italy., , ,","institution_ids":["https://openalex.org/I4210104655","https://openalex.org/I71267560"]},{"raw_affiliation_string":"Dipartimento di Informatica e Sistemistica, Universit\u00e0 degli Studi di Napoli \u201cFederico II\u201d, Via Claudio 21, 80125 Napoli, Italy. E-mail: casolav@unina.it, mazzeo@unina.it, n.mazzocca@unina.it, vittorin@unina.it","institution_ids":["https://openalex.org/I71267560"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045567395","display_name":"Nicola Mazzocca","orcid":"https://orcid.org/0000-0002-0401-9687"},"institutions":[{"id":"https://openalex.org/I4210104655","display_name":"Ingegneria dei Trasporti (Italy)","ror":"https://ror.org/01fp7rv25","country_code":"IT","type":"company","lineage":["https://openalex.org/I4210104655"]},{"id":"https://openalex.org/I71267560","display_name":"University of Naples Federico II","ror":"https://ror.org/05290cv24","country_code":"IT","type":"education","lineage":["https://openalex.org/I71267560"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Nicola Mazzocca","raw_affiliation_strings":["Dipartimento di Informatica e Sistemistica, Universit\u00e0 degli Studi di Napoli \u201cFederico II\u201d, Via Claudio 21, 80125 Napoli, Italy., , ,","Dipartimento di Informatica e Sistemistica, Universit\u00e0 degli Studi di Napoli \u201cFederico II\u201d, Via Claudio 21, 80125 Napoli, Italy. E-mail: casolav@unina.it, mazzeo@unina.it, n.mazzocca@unina.it, vittorin@unina.it"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dipartimento di Informatica e Sistemistica, Universit\u00e0 degli Studi di Napoli \u201cFederico II\u201d, Via Claudio 21, 80125 Napoli, Italy., , ,","institution_ids":["https://openalex.org/I4210104655","https://openalex.org/I71267560"]},{"raw_affiliation_string":"Dipartimento di Informatica e Sistemistica, Universit\u00e0 degli Studi di Napoli \u201cFederico II\u201d, Via Claudio 21, 80125 Napoli, Italy. E-mail: casolav@unina.it, mazzeo@unina.it, n.mazzocca@unina.it, vittorin@unina.it","institution_ids":["https://openalex.org/I71267560"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5010808381","display_name":"Valeria Vittorini","orcid":"https://orcid.org/0000-0002-0451-9593"},"institutions":[{"id":"https://openalex.org/I4210104655","display_name":"Ingegneria dei Trasporti (Italy)","ror":"https://ror.org/01fp7rv25","country_code":"IT","type":"company","lineage":["https://openalex.org/I4210104655"]},{"id":"https://openalex.org/I71267560","display_name":"University of Naples Federico II","ror":"https://ror.org/05290cv24","country_code":"IT","type":"education","lineage":["https://openalex.org/I71267560"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Valeria Vittorini","raw_affiliation_strings":["Dipartimento di Informatica e Sistemistica, Universit\u00e0 degli Studi di Napoli \u201cFederico II\u201d, Via Claudio 21, 80125 Napoli, Italy., , ,","Dipartimento di Informatica e Sistemistica, Universit\u00e0 degli Studi di Napoli \u201cFederico II\u201d, Via Claudio 21, 80125 Napoli, Italy. E-mail: casolav@unina.it, mazzeo@unina.it, n.mazzocca@unina.it, vittorin@unina.it"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dipartimento di Informatica e Sistemistica, Universit\u00e0 degli Studi di Napoli \u201cFederico II\u201d, Via Claudio 21, 80125 Napoli, Italy., , ,","institution_ids":["https://openalex.org/I4210104655","https://openalex.org/I71267560"]},{"raw_affiliation_string":"Dipartimento di Informatica e Sistemistica, Universit\u00e0 degli Studi di Napoli \u201cFederico II\u201d, Via Claudio 21, 80125 Napoli, Italy. E-mail: casolav@unina.it, mazzeo@unina.it, n.mazzocca@unina.it, vittorin@unina.it","institution_ids":["https://openalex.org/I71267560"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5012994834"],"corresponding_institution_ids":["https://openalex.org/I4210104655","https://openalex.org/I71267560"],"apc_list":null,"apc_paid":null,"fwci":12.6869,"has_fulltext":false,"cited_by_count":41,"citation_normalized_percentile":{"value":0.98258491,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"15","issue":"2","first_page":"197","last_page":"229"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6983420848846436},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.6350876092910767},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.6163108944892883},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.6048651337623596},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5613324642181396},{"id":"https://openalex.org/keywords/trustworthiness","display_name":"Trustworthiness","score":0.5584135055541992},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5243982672691345},{"id":"https://openalex.org/keywords/certification","display_name":"Certification","score":0.5152092576026917},{"id":"https://openalex.org/keywords/security-engineering","display_name":"Security engineering","score":0.5032441020011902},{"id":"https://openalex.org/keywords/security-convergence","display_name":"Security convergence","score":0.5003507137298584},{"id":"https://openalex.org/keywords/security-through-obscurity","display_name":"Security through obscurity","score":0.49187588691711426},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.4643115997314453},{"id":"https://openalex.org/keywords/security-testing","display_name":"Security testing","score":0.464114248752594},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.4312014877796173},{"id":"https://openalex.org/keywords/information-security-standards","display_name":"Information security standards","score":0.42178159952163696},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.4182107150554657},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.3602602183818817},{"id":"https://openalex.org/keywords/network-security-policy","display_name":"Network security policy","score":0.35029375553131104},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.3161362409591675},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.1386338770389557},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.09010812640190125}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6983420848846436},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.6350876092910767},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.6163108944892883},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.6048651337623596},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5613324642181396},{"id":"https://openalex.org/C153701036","wikidata":"https://www.wikidata.org/wiki/Q659974","display_name":"Trustworthiness","level":2,"score":0.5584135055541992},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5243982672691345},{"id":"https://openalex.org/C46304622","wikidata":"https://www.wikidata.org/wiki/Q374814","display_name":"Certification","level":2,"score":0.5152092576026917},{"id":"https://openalex.org/C13159133","wikidata":"https://www.wikidata.org/wiki/Q365674","display_name":"Security engineering","level":5,"score":0.5032441020011902},{"id":"https://openalex.org/C52420254","wikidata":"https://www.wikidata.org/wiki/Q7445028","display_name":"Security convergence","level":5,"score":0.5003507137298584},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.49187588691711426},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.4643115997314453},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.464114248752594},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.4312014877796173},{"id":"https://openalex.org/C139547956","wikidata":"https://www.wikidata.org/wiki/Q6031202","display_name":"Information security standards","level":5,"score":0.42178159952163696},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.4182107150554657},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.3602602183818817},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.35029375553131104},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3161362409591675},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.1386338770389557},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.09010812640190125},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3233/jcs-2007-15201","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jcs-2007-15201","pdf_url":null,"source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.5}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W42212681","https://openalex.org/W1490838413","https://openalex.org/W1490935477","https://openalex.org/W1492689271","https://openalex.org/W1559155956","https://openalex.org/W1570274029","https://openalex.org/W1604946903","https://openalex.org/W1688809187","https://openalex.org/W1869268247","https://openalex.org/W1989760806","https://openalex.org/W2041321938","https://openalex.org/W2044721700","https://openalex.org/W2051904152","https://openalex.org/W2098646237","https://openalex.org/W2144794336","https://openalex.org/W2148599697","https://openalex.org/W2152353077","https://openalex.org/W2164441047","https://openalex.org/W2167410438","https://openalex.org/W2168884369","https://openalex.org/W2340406763","https://openalex.org/W2493363380","https://openalex.org/W2899132199","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W1811024770","https://openalex.org/W88610236","https://openalex.org/W2552271940","https://openalex.org/W2299494954","https://openalex.org/W2758682319","https://openalex.org/W585485619","https://openalex.org/W833563683","https://openalex.org/W2776554033","https://openalex.org/W2173238669","https://openalex.org/W1993185027"],"abstract_inverted_index":{"The":[0],"security":[1,20,30,85,100,125],"of":[2,24,52,55,137],"complex":[3],"infrastructures":[4],"depends":[5],"on":[6],"many":[7,69],"technical":[8],"and":[9,39,77,115,118],"organizational":[10],"issues":[11],"that":[12,35,57,127],"need":[13],"to":[14,96,113,122,132,151],"be":[15,59,74,141],"properly":[16],"addressed":[17],"by":[18,83,101,147],"a":[19,29,33,45,53,71,110,119,128,152],"policy.":[21,104],"For":[22],"purpose":[23],"our":[25],"discussion,":[26],"we":[27,108],"define":[28],"policy":[31,81],"as":[32],"document":[34],"states":[36],"what":[37,40],"is":[38,41,87,94,130],"not":[42],"allowed":[43],"in":[44,61],"system":[46,72,99,129],"during":[47],"normal":[48],"operation;":[49],"it":[50,93,150],"consists":[51],"set":[54],"rules":[56],"could":[58],"expressed":[60],"formal,":[62],"semi-formal":[63],"or":[64],"very":[65],"informal":[66],"language.":[67],"In":[68,105],"contexts,":[70],"can":[73],"considered":[75],"secure":[76],"trustworthy":[78,88],"if":[79],"the":[80,98,124,135,138,156],"enforced":[82],"its":[84,103],"administrator":[86],"too;":[89],"from":[90],"this":[91,106],"standpoint":[92],"possible":[95],"evaluate":[97,123],"evaluating":[102],"paper":[107],"present":[109],"policy-based":[111],"methodology":[112,139],"formalize":[114],"compare":[116],"policies,":[117],"Security":[120],"Metric":[121],"level":[126],"able":[131],"grant.":[133],"All":[134],"steps":[136],"will":[140],"illustrated":[142],"with":[143],"an":[144],"operative":[145],"approach,":[146],"directly":[148],"applying":[149],"real":[153],"case":[154],"study:":[155],"semi-automated":[157],"Cross":[158],"Certification":[159],"among":[160],"Public":[161],"Key":[162],"Infrastructures.":[163]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":3},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":3},{"year":2013,"cited_by_count":8},{"year":2012,"cited_by_count":3}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}